Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

MS Explorer has a virus! Help! [CLOSED]

Frylock

Posted 16 September 2005 - 12:56 AM

Frylock

New Member

Member

8 posts

For months, my explorer (not IE - I use Mozilla) had used an inordinate amount of RAM (77% of over 1GB) but the PC managed along, and no one here could duplicate the problem and I couldn't see any duplicate situations that weren't 2-3 years old.

Now, the problem with explorer has metasticized. Explorer no longer uses any more than it's normal amount of CPU space, but if you try to use it in any fashion whatsoever, try to click on any desktop icon other than a text file (say open "My Computer", or try to "Explore" through the Start Button, or even try double click an Excel file on the desktop, a standard Windows error box opens with the following description:

The specific module could not be found C:\WINNT\$N8327~1\DLL~1

The error box duplicates itself faster than one time per second, as to interfere with the most basic of activities; it is difficult to hit the Start Button just to begin the Shut Down sequence.

If you do NOT open files on the desktop, you can manage by going through the Start button and opening files through the "Program" selection. There is no interference with online activities, as well, and no interference while in help mode. This is strictly a virus, but my renewed Norton Anti-Virus can't find it. I've run all the suggested anti-spyware, and spent two days now cleaning out remnants of a "Anti-Virus Gold" episode from 3 months back.

Well, here's my log.. good luck, and thanks for your time..

More info as of 9/17 10:00 AM EDT..

the Norton Anti-Virus that I have "re-upped" to try to cure this problem is telling me that it has been corrupted and that I have to uninstall/reinstall it. I'm currently working that, and then I'll repost a new thread unless you respond to this one telling me not to.

Even more info as of 9/17 1:00 PM EDT..

OK, I've deleted Norton Anti-Virus, installed a new copy, run a virus scan, and it did not detect what's ailing my PC. To date, have run ALL GTG anti-spyware, MS anti-spyware, and all are saying I'm clean to date now.

More on the bug.. the only time it activates is when I try to run a program by double clicking it on my desktop. As you see in the log below, I get a plethora of RunDLL32 errors, (the error popups I'm complaining about, one every second) and I have tried replacing my RunDLL32.exe to no avail. As of this writing, there were 30 views of my problem with no responses thus far.

Frylock

Posted 21 September 2005 - 06:53 PM

Frylock

New Member

Topic Starter

Member

8 posts

Andy,

I went through the process again, and this time installed the Ewido Security Suite.

While running that, it makes an annoying noise every time it hits something objectionable, and it really had some problems with some cookies I'd had for years, so I eventually hit the "fix all" button (or it's equivalent) and it ran through.

After a restart, all was well with the world, and my previous explorer problem (where it was using 70% of my RAM) was gone as well.

If you tell me where to find the log (I clicked "save" at the end of the run, but I don't know where the log is stored), I can post it here, because it most definitely removed whatever bug there was.

Thank you for your attention, and if you check back with me, I'll definitely respond.

andydf

Posted 22 September 2005 - 01:09 PM

andydf

Visiting Staff

Visiting Consultant

1,660 posts

Hi Paul

Ensure Ewido is fully updated, reboot into safe mode. Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.

Open Ewido and run a system scan, Do not open any other windows for the duration of the scan. it usually picks up more in safe mode so it's worth doing

Post a new HJT log so I can see what has been removed and if anything has been left behind.